Privacy Policy

1. Introduction & Commitment to Data Sovereignty

GeM Billing Pro (operated by Madhu Pindariya (Sole Proprietorship), hereinafter "Company", "we", "us", or "our") is committed to protecting the confidentiality and privacy of Indian MSMEs, government contractors, and suppliers. We understand that government tender pricing, consignee records, and invoice figures are commercially sensitive trade data.

This Privacy Policy explains how we collect, handle, store, and safeguard your information across our website (https://gem-billing-pro.in), web application, Android mobile app, and Windows desktop application in compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDPA), 2023.

2. Information We Collect

Based on the features implemented across our software, we collect only the data necessary to provide billing and compliance utilities:

3. Payment Information & PCI-DSS Compliance

When you purchase a subscription or license, all financial transactions are processed securely by Razorpay Software Private Limited.

GeM Billing Pro never collects, sees, or stores your credit card numbers, debit card details, CVVs, or Net Banking passwords. All payment data is tokenized and processed through Razorpay’s PCI-DSS Level 1 certified infrastructure. We receive only transaction metadata (Payment ID, Order ID, payment status, amount, and timestamp) to activate your account.

4. Offline Desktop Architecture (Zero Cloud Storage)

For customers choosing Desktop Private Pro:

• 100% of your business data (firms, parties, items, invoices, and purchase records) is saved exclusively on your local computer hard drive inside an encrypted SQLite file.
• Our web servers receive zero invoice records, buyer data, or financial transactions from your desktop.
• You maintain absolute custody and control over your physical data.

5. Cloud Security Architecture (Cloud Sync Pro)

For customers utilizing Cloud Sync Pro:

• Row Level Security (RLS): Our database employs PostgreSQL RLS policies at the database engine level, ensuring your firm data can only be queried by your authenticated user session. No customer can ever view another customer's data.
• Encryption in Transit: All data transmitted between your web browser or Android app and our servers is encrypted using TLS 1.3 with modern cryptographic cipher suites.
• Encryption at Rest: Database volumes and storage buckets are encrypted using industry-standard AES-256 encryption.

6. How We Use Your Information

We use collected data solely for:

• Generating compliant tax invoices, delivery challans, and CA export ZIP packages requested by you.
• Maintaining real-time synchronization between your web browser and Android mobile app.
• Verifying software license keys and managing subscription renewals.
• Delivering critical account notices, payment receipts, and security alerts.

We DO NOT sell, rent, monetize, or broker your business data, customer contact lists, or tender pricing to any third-party advertisers or competitors under any circumstances.

7. Cookies & Tracking Technologies

Our website uses strictly necessary first-party authentication cookies to maintain your login session. We do not use intrusive third-party cross-site advertising cookies or behavioral tracking networks.

8. User Rights & Data Control

Under the Digital Personal Data Protection Act, you possess full rights to access your data, request corrections, download complete data backups via our 1-Click Export tools, or request the permanent deletion of your cloud account and associated database records by emailing support@gem-billing-pro.in.

9. Grievance Redressal & Privacy Officer

If you have any questions or concerns regarding this Privacy Policy or data security practices, please contact our designated Grievance Officer: